From: paul.moore@hp.com (Paul Moore)
Date: Tue, 25 Aug 2009 17:12:32 -0400
Subject: [refpolicy] [RFC PATCH v1 1/2] refpol: Add the "tun_socket" object
	class flask	definitions
In-Reply-To: <20090825210647.6250.56266.stgit@flek.lan>
References: <20090825210647.6250.56266.stgit@flek.lan>
Message-ID: <20090825211232.6250.84117.stgit@flek.lan>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

Add the new "tun_socket" class to the flask definitions.  The "tun_socket"
object class is used by the new TUN driver hooks which allow policy to control
access to TUN/TAP devices.
---

 policy/flask/access_vectors   |    2 ++
 policy/flask/security_classes |    2 ++
 2 files changed, 4 insertions(+), 0 deletions(-)

diff --git a/policy/flask/access_vectors b/policy/flask/access_vectors
index ef4c063..6292db5 100644
--- a/policy/flask/access_vectors
+++ b/policy/flask/access_vectors
@@ -251,6 +251,8 @@ inherits socket
 class unix_dgram_socket
 inherits socket
 
+class tun_socket
+inherits socket
 
 #
 # Define the access vector interpretation for process-related objects
diff --git a/policy/flask/security_classes b/policy/flask/security_classes
index 9e1bf1a..2bd1bf6 100644
--- a/policy/flask/security_classes
+++ b/policy/flask/security_classes
@@ -119,4 +119,6 @@ class x_application_data	# userspace
 # kernel services that need to override task security, e.g. cachefiles
 class kernel_service 
 
+class tun_socket
+
 # FLASK